Description
Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server scripts, such as by saving a document, so the remaining code runs without safe execution protections.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| frappe | frappe | < 14.59.0, 15.0.0 – < 15.5.0 | 14.59.0 |
References
- GitHub Security Advisory (GHSA-v3vh-7qx4-f582) vendor-advisory
- VulnCheck Advisory: Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scripts third-party-advisory